Well, you already mentioned it: the important updates that already have PoC in the wild that are somehow patched for RHEL but not for CentOS. The lag isn't always huge, but we definitely can't consider CentOS a RHEL bug-for-bug compatible rebuild anymore.

Maybe the issue wasn't highlighted as much in the past where the rebuild compatibility meant that packages could go out without also having the source (in CentOS).